12332 matches found
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...
Moderate: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...
Moderate: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...
glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...
glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...
CVE-2019-19203
CVE-2019-19203 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function gb18030mbcenclen in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantul...
CVE-2025-15614
A flaw was found in ugrep. This vulnerability, a heap buffer over-read, occurs in the LZW decompressor when processing specially crafted .Z archive files. An attacker can provide a malicious .Z file, causing the decompressor to read beyond its allocated memory. This can lead to the application...
mongobleed
mongobleed CVE-2025-14847 exploit for MongoDB heap memory disclosure via OPCOMPRESSED buffer over-read. Usage root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default: 27017 --min-offset MIN Min...
CVE-2026-83951
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-83949
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-81399
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-78516
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-73029
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-72974
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-72932
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-69794
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-69719
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...